Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

flux159/mcp-server-kubernetes

              main @ 47b537d
            

Fixes

CVEs

HIGH

Peak severity

40.0%

Coverage

Highlights

Auth Bypass: 9 prior fixes. Scrutinize any change in this area.

src/index.ts: most-fixed (5 issues). Treat as high-risk during review.

14 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Argument Injection: Attackers can supply positional arguments starting with hyphens to bypass standard parser checks, leading to flag redirection (e.g., --server or --kubeconfig) and subsequent credential theft or API redirection. This risk is tracked under CVE-2026-39884.

Auth Bypass: If tools are not correctly classified in the destructiveTools blocklist or if handler checks are only enforced during listing rather than execution, unauthorized users can run arbitrary cluster-modifying commands in read-only environments.

Command Injection: Accepting unvalidated string inputs or using shell-parsing interfaces (such as execSync or unvalidated execInPod) permits shell interpolation and direct remote code execution. This risk is tracked under CVE-2025-66404.